The design decision worth noting is what it refuses to do: it never logs into or scrapes LinkedIn, and reads page history through the Internet Archive instead — which is how it can check whether a profile is genuinely old without touching a platform's terms. The project is explicit that these are signals, not certainty, and that a result is about a message, never a judgment about a person.
An MCP server that runs the background checks a fraud investigator would run on a job offer, then explains what it found in plain language. It pulls the company, links, email, phone and wallet addresses out of the message and checks each one against free public sources.
- Emails, links, phones, wallets and profile URLs pulled out of a pasted message — `extract_entities`
- The text matched against known scam tactics — `check_scam_patterns`
- Email deliverability and linked social accounts — `check_email`, `check_email_footprint`; raw header origin with SPF/DKIM/DMARC mismatches — `parse_email_headers`
- Domain age, registrar and spoofability, look-alike domains, and phishing or malware blocklists — `check_domain`, `check_domain_auth`, `check_typosquatting`, `find_lookalike_domains`, `check_url`, `check_ip`, `check_certificate_transparency`
- Business registration, press and address checks — `verify_company`, `search_company_news`, `verify_address`
- Crypto wallets checked against known-scam databases — `check_crypto_address`; phone validity and region — `check_phone`
- Org and username existence and age — `check_github_org`, `check_username`; site history read through the Internet Archive — `check_wayback`, `fetch_archived_page`
- A single `analyze` prompt that runs the whole extract → check → verdict flow
No account, no sign-up, no API keys — every source is free and public. The one thing you need is `uv`; on macOS or Linux, `curl -LsSf https://astral.sh/uv/install.sh | sh`. Then either add `uvx jobverify-mcp` to your client config or run `claude mcp add jobverify -- uvx jobverify-mcp`. It fetches and launches itself on demand; the package is `jobverify-mcp` 0.1.0 over stdio, MIT licensed. The first run takes a few seconds to download.
One command — uvx jobverify-mcp